Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
File:                     MjnArILZQnKmoJ37KpCmZzCbOHM.mft (raw, json)
Hash identifier:          ZhI9HBSw+tkkEq+f3V0SbBmORthgbY05nVumIKpy61I=
Subject key identifier:   A8:A6:FE:E9:31:1D:96:A3:F1:34:6B:FD:A4:BA:2B:1C:FF:83:C9:06
Authority key identifier: 32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73
Certificate issuer:       /CN=A9152643/serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
Certificate serial:       04F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
Manifest number:          04EA
Signing time:             Sat 04 Apr 2026 23:32:02 +0000
Manifest this update:     Sat 04 Apr 2026 23:32:01 +0000
Manifest next update:     Sat 11 Apr 2026 23:32:01 +0000
Files and hashes:         1: MjnArILZQnKmoJ37KpCmZzCbOHM.crl (hash: F1SmQzUO4Eq85pkyGAitOe+aBlvf818+tZsrxQu0ZyM=)
                          2: 36837F32574A11EC911FAC86C4F9AE02.roa (hash: wBrg9EM4NwDkdFMcEqz/Qv1QuFLGEbWiLtavdDRu3+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl
                          rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152643, serialNumber=3239C0AC82D94272A6A09DFB2A90A667309B3873
        Validity
            Not Before: Apr  4 23:32:01 2026 GMT
            Not After : Apr 11 23:32:01 2026 GMT
        Subject: CN=69d19f71-c966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:72:b1:d7:ca:ca:24:e4:cc:d7:6d:20:0f:
                    43:68:4c:82:46:b4:b8:be:b1:0a:a6:bb:45:04:04:
                    33:fd:fa:cb:a6:5d:3c:65:ea:7a:5b:aa:21:74:f0:
                    a2:5a:e3:3a:67:84:7a:c8:19:03:cd:b1:e7:56:6f:
                    12:d9:d2:4e:9f:57:aa:0e:5c:78:19:d4:14:c1:e3:
                    64:fa:29:f1:3e:c4:fb:54:a7:aa:05:13:dc:cc:d7:
                    05:82:26:93:5d:d3:01:16:41:f0:e2:d0:11:77:a3:
                    80:56:90:32:f3:fd:f0:b7:8d:6d:56:5e:60:60:1b:
                    81:ab:b9:af:c8:51:da:6c:e0:41:86:4a:ba:ad:d8:
                    68:7a:1e:a4:53:54:ff:2b:6c:ac:6e:5f:ee:61:c0:
                    b7:c6:f3:7b:00:ee:b1:8a:c8:6d:a6:4b:02:85:6b:
                    4e:8a:a4:a2:b5:eb:57:55:9d:2e:e9:30:28:ee:f5:
                    8d:ff:d9:78:e8:8e:fe:88:d9:77:f4:7f:0b:d6:4f:
                    a1:63:37:5e:ca:d5:b1:ed:62:c6:f1:90:93:19:46:
                    76:16:3b:78:2b:12:36:41:50:93:11:e9:43:f5:82:
                    c8:17:91:22:f6:52:c3:89:f2:81:d7:f4:9a:ef:e2:
                    e4:8f:64:9f:e1:cd:6e:3b:ca:82:cd:4e:0f:5d:90:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:FE:E9:31:1D:96:A3:F1:34:6B:FD:A4:BA:2B:1C:FF:83:C9:06
            X509v3 Authority Key Identifier:
                keyid:32:39:C0:AC:82:D9:42:72:A6:A0:9D:FB:2A:90:A6:67:30:9B:38:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MjnArILZQnKmoJ37KpCmZzCbOHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152643/738052AE574811ECB4252B86C4F9AE02/MjnArILZQnKmoJ37KpCmZzCbOHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:1d:8b:ed:41:f0:07:b4:6d:8f:e3:8f:27:8e:a6:d6:a9:
         43:66:d9:26:23:a9:a3:46:e3:09:45:56:83:5f:60:19:1c:e2:
         a5:5e:42:27:d8:2f:d6:56:88:c6:1f:c0:71:08:53:96:41:a0:
         c3:ec:ec:5d:36:d4:36:0c:74:9e:e6:18:1f:ea:69:a5:a7:2d:
         a6:e9:f7:d0:cb:93:31:1e:dd:f1:71:0e:57:85:39:bb:d7:d6:
         a0:4a:09:88:2f:b3:1e:cb:81:2c:a8:89:79:4a:04:17:81:ed:
         08:e4:69:1b:ab:81:6f:e4:22:4d:b6:3b:ba:2c:50:dd:0e:fe:
         9b:0e:88:20:8e:47:fa:c4:75:97:93:90:d4:cc:83:67:23:f7:
         10:b9:bd:f8:85:a8:17:af:c7:2d:22:37:e4:c0:c0:1d:8e:11:
         bf:26:06:b6:ad:ce:32:7b:2a:13:63:37:8a:9f:14:eb:29:e9:
         bd:dc:61:b8:66:d0:75:8c:69:ce:5f:d6:86:75:2d:6f:ab:9e:
         31:37:41:78:78:7e:b3:18:ff:f0:84:bb:a6:de:83:6e:00:12:
         e4:86:d3:07:a8:15:f9:d6:b0:38:dc:52:e7:b4:9d:f3:ad:87:
         76:70:66:1f:c2:39:4e:5c:91:0a:d0:b6:69:18:4f:7e:08:dc:
         8c:2f:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:20:02 2026 by rpki-client